mcp

type ArgSpec struct {
	Name     string
	Type     string
	Flag     string
	Enum     []string
	Required bool
	Pos      bool
}

type Options struct {
	// ReadOnly exposes only tools that cannot modify page state. The decision
	// comes from the policy layer's verb classification (internal/policy), not
	// from a second table here: one classification table means `--read-only`
	// and a `read_only` policy origin can never disagree.
	ReadOnly bool
	// Tools is "default", "full", or a comma-separated list of tool names
	// (with or without the chrome_cdp_ prefix).
	Tools string
	// DenyVerbs lists the CLI verbs the effective policy refuses everywhere —
	// the configured `verbs_denied`, plus MCP mode's own eval/raw default. A
	// tool whose every verb is denied is not exposed: it would answer every
	// call with permission_denied, and an agent pays for its description
	// either way.
	DenyVerbs []string
	// Target pins every call to one tab. With it set, a call that names a
	// different tab is refused rather than silently redirected.
	Target string
	// Version is reported to the client in the initialize handshake.
	Version string
	// Log receives human diagnostics. It must never be stdout: stdout carries
	// the protocol.
	Log io.Writer
}

type Runner interface {
	Run(ctx context.Context, argv []string) (envelope []byte, exit int)
}

type Server struct {
	// contains filtered or unexported fields
}

type ToolSpec struct {
	Name  string
	Title string
	Verbs []string
	Args  []ArgSpec
}